Steps:

You can use standard “Local Service” account, although as soon as you grant explicit permissions to Agent to access to some particular folder, all other services running as “Local Service” will get this access, too. Therefore it is preferable to create a separate user to maximize isolation.

If Agent is not yet installed, create “C:\Program Files\Resilio Connect Agent” path manually and put the executable there. Ensure that its name is “Resilio Connect Agent.exe” even for x64 bit agent. Put the sync.conf file you got from MC in the same folder.

Create user “<user_name>” with standard set of user permissions Use command net user <username> <password> /ADD or do it manually from Control Panel

From now on, Resilio Agent will start with OS X and will not require user to get logged in. It only has limited access to folder, allowed for “resilioagent” user. You can use both POSIX.1 permissions and OS X ACLs to provide access to the user (and to the Agent as a result) to other folders and resources. The Agent itself will deliver files available for reading and writing to everyone due to UMASK = 002. You can see all the parameters (password, umask, etc.) of newly created user inside the script.